Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256111	9.3	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK の HsbParser.getSoundBank 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3867	2010-02-24 12:23	2009-11-5	Show	GitHub Exploit DB Packet Storm

256112	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2010-0388	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

256113	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における複数のヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0387	2010-02-23 11:59	2010-01-20	Show	GitHub Exploit DB Packet Storm

256114	10	危険	サン・マイクロシステムズ	-	Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0361	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

256115	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-0360	2010-02-23 11:58	2010-01-20	Show	GitHub Exploit DB Packet Storm

256116	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-0273	2010-02-23 11:58	2010-01-8	Show	GitHub Exploit DB Packet Storm

256117	7.5	危険	サン・マイクロシステムズ	-	Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0272	2010-02-23 11:57	2010-01-8	Show	GitHub Exploit DB Packet Storm

256118	7.5	危険	サン・マイクロシステムズ VMware レッドハット	-	Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3886	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

256119	5	警告	アップル VMware サン・マイクロシステムズレッドハット	-	Sun Java SE および OpenJDK の TimeZone.getTimeZone メソッドにおけるローカルファイルの存在を知られる脆弱性	CWE-Other その他	CVE-2009-3884	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

256120	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社 VMware レッドハット	-	Sun Java SE および OpenJDK の Windows Pluggable Look and Feel (PL&F) における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2009-3883	2010-02-23 11:52	2009-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209661	5.3	MEDIUM Network	ortussolutions	testbox	In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal.	CWE-22 Path Traversal	CVE-2020-15928	2024-11-21 14:06	2020-11-24	Show	GitHub Exploit DB Packet Storm

209662	6.1	MEDIUM Local	pulseaudio_project	pulseaudio	Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bl…	CWE-415 Double Free	CVE-2020-15710	2024-11-21 14:06	2020-11-19	Show	GitHub Exploit DB Packet Storm

209663	7.5	HIGH Network	siemens	sinumerik_840d_sl_firmware simatic_s7-300_cpu_312_firmware simatic_s7-300_cpu_314_firmware simatic_s7-300_cpu_315-2_dp_firmware simatic_s7-300_cpu_315-2_pn_firmware simatic_s7-300_cpu_…	A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Se…	-	CVE-2020-15783	2024-11-21 14:06	2020-11-13	Show	GitHub Exploit DB Packet Storm

209664	5.5	MEDIUM Local	freedesktop	accountsservice	An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment f…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-16127	2024-11-21 14:06	2020-11-11	Show	GitHub Exploit DB Packet Storm

209665	3.3	LOW Local	freedesktop	accountsservice	An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to Accoun…	NVD-CWE-noinfo	CVE-2020-16126	2024-11-21 14:06	2020-11-11	Show	GitHub Exploit DB Packet Storm

209666	6.8	MEDIUM Physics	gnome	gnome_display_manager	gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could …	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-16125	2024-11-21 14:06	2020-11-10	Show	GitHub Exploit DB Packet Storm

209667	7.8	HIGH Local	packagekit_project canonical	packagekit ubuntu_linux	PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured Policy…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-16122	2024-11-21 14:06	2020-11-7	Show	GitHub Exploit DB Packet Storm

209668	3.3	LOW Local	packagekit_project canonical	packagekit ubuntu_linux	PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.	CWE-209 Information Exposure Through an Error Message	CVE-2020-16121	2024-11-21 14:06	2020-11-7	Show	GitHub Exploit DB Packet Storm

209669	7.8	HIGH Local	canonical	ubuntu_linux	Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-15708	2024-11-21 14:06	2020-11-6	Show	GitHub Exploit DB Packet Storm

209670	9.0	CRITICAL Network	immuta	immuta	Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immut…	CWE-79 Cross-site Scripting	CVE-2020-15952	2024-11-21 14:06	2020-11-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed